reply to post by UmbraSumus
Yep, basically there is a three way handshake, your browser typically sends a SYN packet, saying id like to talk to you, then the Webserver sends back
a SYN/ACK and waits for the final ACK from the browser side...
What will typically happen is that the attacker just won't answer with the last part, leaving the web server in a hold state.... For about 2
minutes....
This is usually not a problem because a web server can service many may browsers at a time.... However when done in a large amount in a distributed
manner, it can completely overload the web server so that it can't do it's job.
edit on 28-11-2010 by HunkaHunka because: (no reason
given)